2000 CVEs (page 3)
Page 3 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0973 | | 2000-12-19 | Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error… | |
CVE-2000-0972 | Medium | 5.5 | 2000-12-19 | HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting… |
CVE-2000-0971 | | 2000-12-19 | Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command. | |
CVE-2000-0970 | | 2000-12-19 | IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web se… | |
CVE-2000-0969 | | 2000-12-19 | Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format stri… | |
CVE-2000-0968 | | 2000-12-19 | Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command. | |
CVE-2000-0967 | | 2000-12-19 | PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that… | |
CVE-2000-0966 | | 2000-12-19 | Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. | |
CVE-2000-0965 | | 2000-12-19 | The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU utilization). | |
CVE-2000-0964 | | 2000-12-19 | Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbit… | |
CVE-2000-0963 | | 2000-12-19 | Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS. | |
CVE-2000-0962 | | 2000-12-19 | The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service. | |
CVE-2000-0961 | | 2000-12-19 | Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command. | |
CVE-2000-0960 | | 2000-12-19 | The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote… | |
CVE-2000-0959 | | 2000-12-19 | glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow loca… | |
CVE-2000-0958 | | 2000-12-19 | HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. | |
CVE-2000-0957 | | 2000-12-19 | The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows atta… | |
CVE-2000-0956 | | 2000-12-19 | cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified acce… | |
CVE-2000-0955 | | 2000-12-19 | Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the commun… | |
CVE-2000-0954 | | 2000-12-19 | Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. | |
CVE-2000-0953 | | 2000-12-19 | Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. | |
CVE-2000-0952 | | 2000-12-19 | global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0951 | | 2000-12-19 | A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distri… | |
CVE-2000-0950 | | 2000-12-19 | Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display name. | |
CVE-2000-0949 | | 2000-12-19 | Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. | |
CVE-2000-0948 | | 2000-12-19 | GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. | |
CVE-2000-0947 | | 2000-12-19 | Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH com… | |
CVE-2000-0946 | | 2000-12-19 | Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain pr… | |
CVE-2000-0945 | | 2000-12-19 | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable pass… | |
CVE-2000-0944 | Critical | 9.8 | 2000-12-19 | CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote… |
CVE-2000-0943 | | 2000-12-19 | Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER comm… | |
CVE-2000-0942 | | 2000-12-19 | The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRest… | |
CVE-2000-0941 | | 2000-12-19 | Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter. | |
CVE-2000-0940 | | 2000-12-19 | Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display"… | |
CVE-2000-0939 | | 2000-12-19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET… | |
CVE-2000-0938 | | 2000-12-19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows r… | |
CVE-2000-0937 | | 2000-12-19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote… | |
CVE-2000-0936 | | 2000-12-19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensiti… | |
CVE-2000-0935 | | 2000-12-19 | Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file. | |
CVE-2000-0934 | | 2000-12-19 | Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. | |
CVE-2000-0933 | | 2000-12-19 | The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be res… | |
CVE-2000-0932 | | 2000-12-19 | MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service. | |
CVE-2000-0931 | | 2000-12-19 | Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message cont… | |
CVE-2000-0930 | | 2000-12-19 | Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. | |
CVE-2000-0929 | | 2000-12-19 | Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed prop… | |
CVE-2000-0928 | | 2000-12-19 | WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. | |
CVE-2000-0927 | | 2000-12-19 | WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. | |
CVE-2000-0926 | | 2000-12-19 | SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. | |
CVE-2000-0925 | | 2000-12-19 | The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows… | |
CVE-2000-0924 | | 2000-12-19 | Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in… | |
CVE-2000-0923 | | 2000-12-19 | authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. | |
CVE-2000-0922 | | 2000-12-19 | Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrar… | |
CVE-2000-0921 | | 2000-12-19 | Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack… | |
CVE-2000-0920 | | 2000-12-19 | Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in… | |
CVE-2000-0919 | | 2000-12-19 | Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0918 | | 2000-12-19 | Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatti… | |
CVE-2000-0917 | | 2000-12-19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. | |
CVE-2000-0916 | | 2000-12-19 | FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), whic… | |
CVE-2000-0915 | | 2000-12-19 | fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. | |
CVE-2000-0914 | | 2000-12-19 | OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. | |
CVE-2000-0913 | | 2000-12-19 | mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose nam… | |
CVE-2000-0912 | | 2000-12-19 | MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" paramet… | |
CVE-2000-0911 | | 2000-12-19 | IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the fil… | |
CVE-2000-0910 | | 2000-12-19 | Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. | |
CVE-2000-0909 | | 2000-12-19 | Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header. | |
CVE-2000-0908 | | 2000-12-19 | BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in… | |
CVE-2000-0907 | | 2000-12-19 | EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands. | |
CVE-2000-0906 | | 2000-12-19 | Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) a… | |
CVE-2000-0905 | | 2000-12-19 | QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information… | |
CVE-2000-0904 | | 2000-12-19 | Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows… | |
CVE-2000-0903 | | 2000-12-19 | Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot)… | |
CVE-2000-0902 | | 2000-12-19 | getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0901 | | 2000-12-19 | Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variab… | |
CVE-2000-0900 | | 2000-12-19 | Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variat… | |
CVE-2000-0888 | | 2000-12-19 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug." | |
CVE-2000-0887 | | 2000-12-19 | named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a na… | |
CVE-2000-0886 | | 2000-12-19 | IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system comma… | |
CVE-2000-0885 | | 2000-12-19 | Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a l… | |
CVE-2000-0884 | | 2000-12-19 | IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNI… | |
CVE-2000-0818 | | 2000-12-19 | The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary fi… | |
CVE-2000-0817 | | 2000-12-19 | Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data, ak… | |
CVE-2000-0811 | | 2000-12-19 | Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the username or bidfile form fields. | |
CVE-2000-0810 | | 2000-12-19 | Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories vi… | |
CVE-2000-0803 | | 2000-12-19 | GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a maliciou… | |
CVE-2000-1212 | | 2000-12-18 | Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to mod… | |
CVE-2000-1211 | | 2000-12-16 | Zope 2.2.0 through 2.2.4 does not properly perform security registration for legacy names of object constructors such as DTML method objects, which could allow… | |
CVE-2000-1078 | | 2000-12-11 | ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. | |
CVE-2000-1077 | | 2000-12-11 | Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a… | |
CVE-2000-1076 | | 2000-12-11 | Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and pos… | |
CVE-2000-1075 | | 2000-12-11 | Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a… | |
CVE-2000-1074 | | 2000-12-11 | csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root p… | |
CVE-2000-1073 | | 2000-12-11 | csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by crea… | |
CVE-2000-1072 | | 2000-12-11 | iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands… | |
CVE-2000-1071 | | 2000-12-11 | The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windo… | |
CVE-2000-1070 | | 2000-12-11 | pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or priva… | |
CVE-2000-1069 | | 2000-12-11 | pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by specifying the same valu… | |
CVE-2000-1068 | | 2000-12-11 | pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter. | |
CVE-2000-1066 | | 2000-12-11 | The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long D… | |
CVE-2000-1065 | | 2000-12-11 | Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer cras… | |
CVE-2000-1064 | | 2000-12-11 | Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. |